{"id":"CVE-2007-2393","aliases":["EUVD-2007-2388","GHSA-fmp6-6vj9-c43j"],"status":"published","title":"The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass...","description":"The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.06857,"percentile":0.94087,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2007-07-15T21:00:00Z","modified":"2026-06-16T22:39:29Z","products":[{"vendor":"apple","product":"quicktime"}],"references":[{"url":"http://secunia.com/advisories/26034","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id?1018373","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-193A.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","US Government Resource"]},{"url":"http://www.vupen.com/english/advisories/2007/2510","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.securityfocus.com/bid/24873","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://docs.info.apple.com/article.html?artnum=305947","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35359","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://lists.apple.com/archives/Security-announce/2007/Jul/msg00001.html","tags":["vendor-advisory","x_refsource_APPLE","x_transferred","Patch"]},{"url":"http://osvdb.org/36135","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-2393"},{"url":"https://github.com/advisories/GHSA-fmp6-6vj9-c43j"}],"sources":{"cve":[{"id":"CVE-2007-2393","description":"The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution.","status":"published","published":"2007-07-15T21:00:00Z","modified":"2024-08-07T13:33:28.583Z","updated_at":"2026-11-02T13:32:23.14582Z"}],"euvd":[{"id":"EUVD-2007-2388","description":"The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution.","status":"published","published":"2007-07-15T21:00:00Z","modified":"2024-08-07T13:33:28Z","updated_at":"2026-11-03T01:38:21.397099Z"}],"ghsa":[{"id":"GHSA-fmp6-6vj9-c43j","title":"The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass...","description":"The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution.","status":"published","published":"2022-05-01T18:03:10Z","modified":"2023-01-31T05:03:41Z","updated_at":"2026-11-02T14:48:31.353557Z"}],"nvd":[{"id":"CVE-2007-2393","description":"The design of QuickTime for Java in Apple Quicktime before 7.2 allows remote attackers to bypass certain security controls and write to process memory via Java applets, possibly leading to arbitrary code execution.","status":"published","published":"2007-07-15T21:30:00Z","modified":"2026-06-16T22:39:29.85Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:17.964611Z"}]}}